Authentication - Hanto

Hanto API requests use bearer authentication. Send your API key in the Authorization header.

Authorization: Bearer sk_live_REPLACE_WITH_YOUR_KEY

Create a key

Create API keys inside the Hanto app from API keys. When a key is created, Hanto shows the plaintext value once. Copy it into your secret manager before leaving the page. After that, the app shows only a masked key identifier.

Revoke a key

Revoke a key from API keys when it is no longer needed or may have been exposed. Requests using a revoked key return:

{
  "error": "unauthorized"
}

Request format

Use the key with every public API request:

curl https://api.hanto.ai/api/v1/person/enrich \
  -H "Authorization: Bearer sk_live_REPLACE_WITH_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"email":"[email protected]"}'

Store API keys as secrets. Do not commit them, paste them into client-side code, or expose them in logs.